» donation-tools.org
Overview
Analysis
IPs Addresses (2)
Downloads (23)
Network (187)
Website Detail

donation-tools.org

Domains By Proxy, LLC (Proxy Registrant)

Domain Information

The domain donation-tools.org is registered by proxy through GoDaddy.com, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in San Francisco, California within the United States which resides on the Microsoft Corp network.

Registrant:

Domains By Proxy, LLC

Registrar:

GoDaddy.com, LLC

Server location:

California, United States (US)

ASN:

AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation

Whois:

2 donation-tools.org records

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Softonic.K, PUP.iRobinHood.V, PUP.iRobinHood.a, PUP.iRobinHood.W, PUP.iRobinHood.b, PUP.iRobinHood.U, PUP.iRobinHood.R, PUP.iRobinHood.T, PUP.iRobinHood.c, PUP.iRobinHood.S, PUP.iRobinHood.J, PUP.iRobinHood.EE, PUP.iRobinHood.Installer (M)

91.30%

Dr.Web

Adware.Downware.837, Threat.Undefined

13.04%

NANO AntiVirus

Trojan.Win32.Agent.cxhynf, Riskware.Win32.Toolbar.csnyij

13.04%

IKARUS anti.virus

PUA.Montera

13.04%

avast!

Win32:PUP-gen [PUP], Win32:Adware-gen [Adw]

8.70%

ESET NOD32

Win32/Toolbar.Montiera

8.70%

Malwarebytes

PUP.Optional.SoftonicTB.A, PUP.Optional.iRobinHood.A

8.70%

Trend Micro House Call

TROJ_GEN.F47V0522, Suspicious_GEN.F47V0912

8.70%

AVG

Montera Technologeis LTD

4.35%

herdProtect (fuzzy)

a variant of dc3895da8eaa5498730b1b4127ce564dc7ae8e7e

4.35%

SUPERAntiSpyware

Trojan.Agent/Gen-FraudPack

4.35%

ESET NOD32

Win32/Toolbar.Montiera.I potentially unwanted application

4.35%

VIPRE Antivirus

Threat.4791856

4.35%

McAfee

Artemis!BBD9212FEC80

4.35%

Baidu Antivirus

PUA.Win32.Montiera

4.35%

The domain donation-tools.org has been seen to resolve to the following 2 IP addresses.

137.117.17.70

microsoftventures.com

April 14, 2016

137.117.17.166

August 17, 2014

File downloads found at URLs served by donation-tools.org.

1 / 68 (Adware)

http://donation-tools.org/Packages/pkgs/5716/All/.../iRobinHoodPartnersAddonFull12_86.exe (file30312.exe)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5719/All/.../UICCAddonFull10_48.exe (151620fc5fa071452814f11af9ea87cd)

9 / 68 (PUP)

http://donation-tools.org/irhtoolbar.exe (bbd9212fec80cbc0a91dff21524276ce)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5705/all/.../iRobinHoodPartnersAddonFullJSI.exe (8ae8c263b062fafe5e0f0ddb1d2c7ea9)

1 / 68 (Adware)

http://donation-tools.org/Packages/pkgs/195/All/.../KidSaveAddonFull1_22.exe (5013e7c80de2181bd338b1d99d213aa2)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5716/All/.../EazelAddonFull1_42.exe (5c4e296cb7c73c10d10f88b9fb772379)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5705/all/.../SoftonicGivingProgramAddonFull1_38.exe (81e1cfb0b949e3693c09bd5089e151db)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5719/All/.../UICCAddonFull1_48.exe (86ba51fdc5449aa35de9fbfdd9e9ab89)

1 / 68 (Adware)

http://donation-tools.org/CJ/.../TogglegivingprogramAddonFull1_14.exe (235677a681271a1c4fba21ce3ad0e99f)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5699/All/.../ToggleAddonFull1_14.exe (3449ca3d42dca480db652c76d29d0250)

5 / 68 (PUP)

http://donation-tools.org/packages/pkgs/5705/.../irhtoolbar.exe (fa5767272a193a99f0bfb8bd8b5fb08b)

2 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5716/All/.../iRobinHoodPartnersVAddonFull1_42.exe (9d683aaefaf7ccca711f354b78d646f5)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5690/All/.../BabylonGivingProgramAddonFull1_21.exe (23766cc9ce732663e15c4b10b1486479)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5725/All/.../SienAddonFull1_53.exe (064610c1d227f7c432781c30b4cc01ec)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5716/All/.../iRobinHoodPartnersVAddonFull1_42.exe (irobinhoodpartnersvaddonfull1_62.exe)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5716/All/.../iRobinHoodPartnersVAddonFull1_42.exe (irobinhoodpartnersvaddonfull1_61.exe)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5727/IE/.../KeyDownloadAddon1_59.exe (6665d30fc41bfb3b1f197981d635aff1)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5728/All/.../iRobinHoodPartnersSAddonFull19_64.exe (57708a73725dad9d279c8c5dce55b887)

1 / 68 (Adware)

http://donation-tools.org/Packages/pkgs/5727/All/.../KeyAddonAddonFull18_59.exe (563ac6a7d4c37bca9551f1bcb6dc7908)

1 / 68 (Adware)

http://donation-tools.org/Packages/pkgs/5730/All/.../BundloreAddonFull21_67.exe (5cf0d2b817e53c82f227b8ba05383729)

1 / 68 (Adware)

http://donation-tools.org/Packages/pkgs/5728/All/.../iRobinHoodPartnersAddonFull19_64.exe (618f086f6456ad8b34bf5e1f9c7716e5)

1 / 68 (Adware)

http://donation-tools.org/packages/pkgs/5732/All/.../PHPNukeAddonFull22_69.exe (8f775f1eafb9e84e790f4e58d3fc7567)

10 / 68 (PUP)

http://donation-tools.org/oleObject1.exe (19f5f9a8919acb593cefa05ff215d2ec)

The following 187 files have been seen to comunicate with donation-tools.org in live environments.

TCP » 137.117.17.70:443

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 137.117.17.70:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 137.117.17.70:80

kometa.exe (Kometa by @COMPANY_FULLNAME@)

TCP » 137.117.17.70:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 137.117.17.70:443

browserairexec.exe (BrowserAir by Goobzo)

TCP » 137.117.17.70:443

crossbrowse.exe (Crossbrowse)

TCP » 137.117.17.70:443

UCBrowser.exe (by UCWeb)

TCP » 137.117.17.70:443

kometa.exe (Kometa by Kometa Authors)

TCP » 137.117.17.70:443

UCBrowser.exe (by UCWeb)

TCP » 137.117.17.70:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 137.117.17.70:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 137.117.17.70:443

UCBrowser.exe (UC Browser by UCWeb)

TCP » 137.117.17.70:80

browserairexec.exe (BrowserAir by Goobzo)

TCP » 137.117.17.70:80

UCBrowser.exe (by UCWeb)

TCP » 137.117.17.70:443

emuletorrent.exe

TCP » 137.117.17.70:443

crossbrowse.exe (Crossbrowse)

TCP » 137.117.17.70:443

crossbrowse.exe (Crossbrowse)

TCP » 137.117.17.70:443

bobrowser.exe (BoBrowser by The BoBrowser Authors)

TCP » 137.117.17.70:443

UCBrowser.exe (by UCWeb)

TCP » 137.117.17.70:443

crossbrowse.exe (Crossbrowse)

Latest 20 of 358 files

URL:

http://donation-tools.org/

Google Analytics:

UA-23413730

Title:

“Home”

SSL certificate subject:

CN=*.donation-tools.org, OU=Domain Control Validated

SSL certificate issuer:

CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc."

Web server:

Microsoft-IIS/8.0 (ASP.NET) (Version: 2.0.50727)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.